Alcami Corporation Privacy Policy

Effective and last updated: December 2025

Alcami Corporation and each of our subsidiaries and affiliates (collectively, “Alcami,” “we,” “us,” and “our,”) respect your privacy and are committed to protecting the personal information we hold about you. We provide this Privacy Policy (the “Policy”) to explain how we collect, use, disclose, store and otherwise process personal information. Unless otherwise expressly indicated in the Policy, the Policy applies only to personal information that we collect through our Alcami OnDemand customer portal, our website https://www.alcami.com/, and through any other websites, and online products and services that we operate and that include a link to the Policy, as well as any other communications you may have with us such as via email (collectively, the “Services”).

California – Notice at Collection

If you are a California resident, the Additional Information for Residents of California section below includes additional information that we provide pursuant to the California Consumer Privacy Act of 2018 as amended from time to time (the “CCPA”). That section includes information regarding the categories of information to be collected, the purposes for which the categories of information are collected or used, whether the information is sold or shared, and how long the information is retained. You can find those details by clicking on the above links.

Personal Information We Collect and How We Collect It

The personal information we collect depends on the context of your interactions with us, the choices you make, and the Services you use. We may collect this information when you provide it to us directly, automatically when you use the Services, and when other sources provide it to us, as further described below.

Information You Provide to Us Directly

We collect personal information when you provide it to us, including, for example, when you fill out forms on our website. This personal information may include:

• Contact information, such as your first and last name, address, email address, and telephone number.
• Employer or other business information, such as your company name, title and business contact information.
• Information you provide about your interest in our products and services, such as the Alcami offerings in which you are interested.
• Authentication and account information, including your username and password.
• Any other information you submit when you contact us, including any information you provide through our website “Contact Us” form, the Ask Alcami AI-powered assistant, the “Message” text box, a Sample Submission Form, or through other contact methods.
• If you seek employment with us through the “Careers” section of our website, professional and employment related information such as your resume, employment history, certain non-public information such as your Social Security number or characteristics of protected classifications under state or federal law, and any other information you choose to provide in your employment inquiries or applications.

Information We Collect Automatically

We may also collect certain information automatically when you use our Services, such as the following:

• Information about the browser and device you use to access the Services, such as device identifiers like IP addresses or MAC addresses, operating system information, browser information (such as browser type and browser language), usage information including the date and time of your request, and other information about your interaction with the Services.
• Information stored in web-based technologies like cookies, pixel tags, log files, or web beacons, including browser type, portions of the online services visited, time spent on the online services, pages visited, referring URLs, links you click on, video browsing, download and purchase activity and data, and other traffic and usage data.
• Information that indicates your approximate location, including as derived from your IP address.
• Other information collected through in-app tracking technologies incorporated into our mobile application, such as unique device identifiers, and other information about your usage of our mobile application.

When you visit our website, third parties with whom we work may use cookies and other similar technologies to collect this information and other information about your online activities over time and across third-party websites or online services. For example, we use Google Analytics to learn more about how visitors use our online services. The information generated by the cookies about your use of the website includes your IP address. If you so choose, you may be able to opt out by turning off cookies in the preferences settings in your browser. For more information about how Google Analytics uses and processes data, please visit https://www.google.com/policies/privacy/partners/. We may also use other technologies to monitor your activities on the Services.

Information We Obtain from Third Party Sources

We may also receive personal information about you from third party sources that may include:

• Services that make user-generated content from their service available to others, such as online business reviews or public social media posts.
• Partners with which we offer co-branded services or engage in joint marketing activities.

How We Use Personal Information

Depending on the context of your interactions with us, we may use the personal information we collect for a variety of purposes that include:

• Communicating with you, including by fulfilling your requests and responding to your inquiries.
• Providing and administering the Services.
• Preparing and performing our contracts and agreements with you.
• For our internal business operations, such as evaluating, updating, and modifying our operations, conducting research and analysis like industry benchmarking, developing new services, and performing other internal business operations, including as described elsewhere in the Policy.
• Understanding how you and other users use the Services and determining what features and services may interest you and other users.
• Debugging, identifying and repairing errors, effectuating similar functional enhancements, and improving the Services.
• Storing information about your preferences, recognizing you when you use the Services, correcting or supplementing our records, and customizing your experience, including personalizing our service offerings, websites, mobile services, marketing offers and advertising.
• Complying with applicable laws and regulations, other legal requirements, and industry standards.
• For our recruitment and hiring purposes, including evaluating and processing your resume and employment application.
• For system administration purposes, such as maintaining the safety, security, and integrity of the Services, including our website, mobile applications, technology assets, services, and our business.
• Protecting against malicious, deceptive, fraudulent, illegal, or other unauthorized activity, and participating in any prosecution or enforcement of laws or agreements meant to prevent or punish such activity.
• Legal and safety purposes, such as maintaining the safety, security, and integrity of our technology assets, services, and our organization, preserving or enforcing our legal rights and property; protecting our users, our employees, and others; and complying with industry standards.
• Enforcing our policies, terms of use, or rights arising from contracts.
• Evaluating or participating in an actual or potential merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, including as part of bankruptcy, liquidation, or similar proceedings.
• For such other purposes as you may authorize from time to time.

We may also aggregate or de-identify personal information by removing any details that identify you personally. Aggregated or de-identified information will not be subject to this Policy and will be used to the extent permissible under applicable law.

How We Disclose Personal Information

We may disclose the personal information we collect or receive about you:

• To you or those acting on your behalf.
• To our affiliates and subsidiaries.
• To our business partners, such as partners involved in joint business transactions.
• To our third-party vendors and service providers to process your information on our behalf, including payment processors, software and web developers, consultants, and other vendors we engage to help provide products and the Services. These parties are bound by contractual obligations to keep your information confidential and use it only for the purposes for which we disclose it to them.
• To third parties and networks that provide online tracking technologies that we use to conduct internal analytics and functionality relative to the use and improvement of the Services, as well as for advertising and marketing purposes.
• To government agencies and authorities, law enforcement officials, law courts, or to third parties: (a) if we believe disclosure is required by applicable law, regulation or legal process (such as pursuant to a subpoena or judicial order); or (b) to protect and defend our rights, or the rights, health, or safety of third parties, including to establish, make, or defend against legal claims; or (c) in the interest of public health and safety, including in the event of an emergency that threatens an individual’s life, health, or security.
• To enforce our policies, terms of use, and agreements and to protect our rights, property, or safety, and the rights, property, and safety of our users and other third parties.
• To protect and secure the Services, including against fraud and other misuse, and our partners’ rights, property, or safety, and the rights, property, and safety of our users and other third parties.
• To an actual or potential buyer or other successor or organization in the event of an actual or potential merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, including as part of bankruptcy, liquidation, or similar proceedings.
• To operate, evaluate, debug, identify and repair errors, effectuate similar functional enhancements, and improve the Services.
• For such other purposes, and to such other third parties, as you may authorize or direct from time to time.

Your Choices

You have choices about how we use your personal information.

You may choose not to provide the personal information we request. However, not providing information we request may restrict your ability to use certain features of the Services. For example, if you choose not to provide personal information that is necessary to provide any aspect of our Services, you may not be able to use the Services.

You may opt out of receiving marketing or other communications from us by email at any time by using the opt-out mechanism provided with those messages. Note that if you do business with us in the future, you may still receive some email communications from us, such as order confirmations, that relate to your transactions with us.

If you want to limit or prevent our ability to receive location information from you, you can deny or remove the permission for certain Services to access location information or deactivate location services on your device. Please refer to your device manufacturer or operating system instructions for instructions on how to do this.

You may be able to restrict the collection of personal information or functionality through your device’s operating system or by disabling cookies but doing so may prevent you from using the functionality of the Services. Some Internet browsers have a “do-not-track” feature that lets you tell websites that you do not want to have your online activities tracked. The Services do not currently respond to browser “do not track” signals or similar mechanisms. We may allow third parties to use the Services to collect personal information about your online activities over time and across different websites, applications, and other online products or services.

Depending on your state or country of residence, you may have certain rights related to your personal data, including:

• Access and Data Portability. You may confirm whether we process your personal information and access a copy of the personal information we process. To the extent feasible and required by law, data will be provided in a portable format.
• Correction. You may request that we correct inaccuracies in your personal information that we maintain, taking into account the information’s nature and processing purpose.
• Deletion. You may request that we delete personal information about you that we maintain, subject to certain exception under applicable law.
• Opt Out of Using Personal Data for Targeted Advertising, Profiling, and Sales. If applicable, you may request that we do not use your personal information for these purposes.

The exact scope of these rights vary by jurisdiction. There are also several exceptions where we may not have an obligation to fulfill your request. We will not discriminate in response to any privacy requests you make.

In order to ensure that a request is genuine, we may need to take steps to verify your identity or the identity of an agent making a request on your behalf.

To exercise any of these rights, please email us at privacy@alcami.com.

Additional Information for Residents of California

This section applies only to residents of the State of California and generally describes how we collect, use, and disclose the personal information of California residents and their households that we receive both through the Services and through other methods, including offline (“California Personal Information”). This section supplements the rest of our Privacy Policy by providing certain additional information and describing certain rights that apply only to these individuals. It does not apply to information subject to applicable exceptions from the CCPA, such as deidentified information.

This section also does not address our processing of personal information of our job applicants, employees, and contractors for human resources, employment, benefits administration, health and safety, and other similar business-related and legal compliance purposes. If you are a California resident and are a job applicant, employee, or contractor, of Alcami, or an emergency contact or beneficiary of benefits provided to one of our applicants, employees, or contractors, please refer to our California Human Resources Notice at Collection and Privacy Policy for information regarding our collection, use, disclosure, and other processing of personal information for human resources, employment, benefits administration, health and safety, and other similar business-related and legal compliance purposes. To request a copy please email us at privacy@alcami.com.

California Personal Information We Collect and Process

We may have collected and processed the following categories of California Personal Information regarding consumers within the last 12 months:

• Identifiers such as your real name and email address.
• Unique and online identifiers such as device identifiers, internet protocol addresses, cookie identifiers, beacon identifiers, pixel tags or mobile ad identifiers or similar technology, or other forms of persistent or probabilistic identifiers that can be used to identify a particular consumer or device.
• Commercial information that identifies or could reasonably be linked to you, such as products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Internet or other electronic network activity information that identifies or could reasonably be linked to you, such as browsing history, search history and information regarding an individual’s interaction with an internet website, application, or advertisement.
• Geolocation information, such as your approximate location as derived from your IP address.
• Professional or employment-related information, such as your employer, title, job responsibilities, and work history.
• Personal information categories covered by the laws this section is intended to address, such as name, signature, address, telephone number, or financial information. Some personal information included in this category may overlap with other categories.

Retention of California Personal Information

We retain California Personal Information for as long as necessary to carry out the processing activities described in this Policy, including but not limited to providing the Services, providing you with customer service, answering your queries or resolving technical problems, fulfilling our legal obligations, establishing, protecting or defending legal claims, or enforcing our agreements. We may also retain cached or archived copies of your information for a reasonable period of time.

Sources of California Personal Information

We may collect or obtain the following categories of California Personal Information from the sources described in the “The Personal Information We Collect and How We Collect It” section of this Policy, above, including:

• Directly from you. For example, through website forms you complete when you use our Services.
• Automatically and indirectly from you, such as through logging and analytics tools, cookies, pixel tags, and other automatic data collection.
• From third parties, such as our service providers, services that make user-generated content available to others, communications services, social networks and social media online services, affiliates, and other business partners.

Purposes for Collecting, Using, Disclosing, and Otherwise Processing California Personal Information

We may collect, use, disclose, or otherwise process the categories of California Personal Information described above in the “California Personal Information We Collect and Process” section above, for one or more of the business purposes and commercial purposes described in the “How We Use Personal Information” and “How We Share Personal Information” sections above.

Disclosures of California Personal Information for Business Purposes

We may disclose the categories of personal information that we collect and process as indicated above to the categories of third parties described in the “How We Share Personal Information” section above. In the preceding 12 months, we may have disclosed the categories of personal information listed below to the categories of third parties identified below for a business purpose:

• Identifiers— to our affiliates, service providers, and such third parties as you may authorize.
• Unique and online identifiers—to our affiliates, service providers, and such third parties as you may authorize.
• Commercial information—to our affiliates, service providers, and such third parties as you may authorize.
• Internet or other electronic network activity information—to our affiliates, service providers, and such third parties as you may authorize.
• Geolocation information— to our affiliates, service providers, and such third parties as you may authorize.
• Professional or employment-related information—to our affiliates, service providers, and such third parties as you may authorize.
• Inferences drawn from personal information—to our affiliates, service providers, and such third parties as you may authorize.
• Personal information categories covered by the laws this section is intended to address—to our affiliates, service providers, and such third parties as you may authorize.

Sharing and Sales of California Personal Information

As described in this Privacy Policy, certain uses and disclosures of your personal information may be considered “selling” or “sharing” under applicable California law. You may exercise your right to opt out of the “sale” or “sharing” of your personal information by emailing us at privacy@alcami.com.

We do not have actual knowledge that we sell the personal information of consumers under the age of 16 or share the personal information of consumers under the age of 16 for targeted or cross-context behavioral advertising.

California Personal Information Rights and Choices

The CCPA provides consumers with specific rights regarding their California Personal Information. This section describes those rights and explains how to exercise those rights to the extent we direct the purposes and means of the processing of your California Personal Information and otherwise qualify as a “business” under the CCPA. Where the rights described below are provided by law, there may be limitations or exceptions that apply to your request in accordance with applicable legal requirements. We have described these rights generally, without noting all applicable or potentially applicable limitations or exceptions. When you make a request, we may provide more detailed information regarding any legal requirements applicable to or your request and whether any exception or limitation applies.

• Right to Access Specific California Personal Information. You have the right to request to receive certain information about our collection, use, and disclosure of your California Personal Information during the applicable time period for your request. If we receive and confirm a verifiable consumer request from you pursuant to the “Exercising Your Rights” section below, we will disclose to you, depending on the scope of the request:
  • The categories of California Personal Information we collected about you.
  • The categories of sources for the California Personal Information we collected about you.
  • Our business or commercial purpose for collecting California Personal Information about you.
  • The categories of third parties to whom we disclose your California Personal Information generally.
  • The specific pieces of California Personal Information we collected about you.
  • If we disclose your California Personal Information for a business purpose, a list of the categories of third parties to whom we disclosed California Personal Information for a business purpose, as applicable, identifying the categories of California Personal Information disclosed to those parties during the applicable period of time for your request.

• Right to Data Portability. You may request to receive a copy of your electronic California Personal Information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance.

• Right to Deletion. Subject to certain exceptions, you have the right to request that we delete the California Personal Information that we collected about you.

• Right to Correct Inaccuracies. You may request that we correct California Personal Information about you that is inaccurate. We will take into account the nature of the California Personal Information and the purposes of our processing when we address your request.

• Right of Non-Discrimination. You have a right to not receive discriminatory treatment for exercising your rights described above. Except to the extent permitted by applicable law, we will not deny you, or charge you different prices or rates for, goods or services or provide a different level or quality of goods or services for exercising the rights described above.

Exercising Your Rights. To exercise the access, portability, deletion, or correction rights described above, please submit a request to privacy@alcami.com.

Only you, or an authorized agent that you authorize to act on your behalf, may make a verifiable consumer request related to your California Personal Information. You may also make a verifiable consumer request on behalf of your minor child. We may mandate additional requirements for requests submitted through an authorized agent, such as requiring you to verify your identity directly with us or to directly confirm the authorized agent’s permission to act on your behalf.

Your request must provide information sufficient to permit us to reasonably verify you are the person about whom we collected California Personal Information, or an authorized agent (except for requests submitted via opt-out preference signal). In order to verify your request, we may ask you to provide information such as your first and last name, email address, mailing address, telephone number, or any other information necessary to verify your identity or that you are a representative of the person. Your request also must include sufficient detail for us to properly understand, evaluate, and respond to it. If we are not able to verify your request, we will contact you for more information.

If we cannot fulfill, or are permitted to decline, your request then we will alert you or your authorized agent. We may charge a reasonable fee to respond in certain circumstances where permissible under applicable law, such as if you have made several repetitive requests.

In certain situations, if we do not fulfill your request, you may appeal by contacting us through the methods described above.

Additional Disclosures for Users Located in the European Economic Area (“EEA”), Switzerland, and United Kingdom (“UK”)

This section is intended to provide additional information in accordance with the requirements of the EU’s General Data Protection Regulation and corresponding laws in Switzerland and the United Kingdom (collectively, “GDPR”) to individuals located in those jurisdictions, and applies to the extent our processing of personal information is subject to the GDPR.

Legal Bases for EEA, Switzerland, and UK Personal Information Processing

As a general matter, we use, disclose, transmit, transfer, store, and otherwise process your personal information to provide you the Services when we have an appropriate legal basis. We may process the information we collect from you for the following purposes.

• Our legitimate interests, consistent with your rights and appropriate to the context, such as for the uses discussed in the section titled “How We Use Personal Information,” above.
• To provide services that are subject to contractual terms you have accepted, such as our licenses, service agreements, and terms of use.
• To the extent you provide your consent.
• To comply with the law and our legal obligations and as well as to protect you and other individuals from certain harms.

Retention of EEA, Switzerland, and UK Personal Information

We retain personal information for as long as we reasonably need it to carry out the processing activities described above, including to provide the Services, to comply with applicable laws, regulations, rules, and requests or relevant law enforcement and/or other governmental agencies, to resolve disputes, and to enforce our agreements, as applicable.

Rights of Individuals Located in the EEA, Switzerland, or UK

If you are located in the EEA, UK, or Switzerland, you may have additional rights including the right to request access to, correction of, erasure of, or the transfer of your personal information, as well as the right to revoke consent to, object to, or restrict the processing of your personal information. You may exercise these rights, if applicable, by contacting us as described in the “How to Contact Us” section of this Privacy Policy. Individuals located in the EEA, Switzerland, or the UK may also have the right to lodge a complaint with an EEA, Swiss, or UK supervisory authority, as applicable. Please be prepared to provide reasonable information to identify yourself and authenticate your requests.

International Transfers of Personal Information from the EEA, Switzerland, or UK

If we transfer personal information subject to the data protection laws of the EEA, Switzerland, or the UK from the EEA, Switzerland, or the UK to another jurisdiction, we will either transfer such personal information to a jurisdiction deemed to provide an adequate level of protection under applicable data protection laws or rely on a legal framework (a copy of which may be obtainable by contacting us as described in the “How to Contact Us” section of this Privacy Policy) that provides appropriate safeguards, which could include the standard contractual clauses, binding corporate rules, or another framework deemed adequate under applicable data protection laws, for transfers to jurisdictions not deemed to provide an adequate level of protection under applicable data protection laws.

Other Important Information.

Collection of Personal Information from Children. The Services are not directed towards persons under the age of 18. We do not knowingly collect any personal information from anyone under the age of 18, nor do we knowingly market our web sites to anyone under the age of 18. If we learn we have collected and received personal information from anyone under the age of 18 without verification of parental consent, we will delete that information.

Third-Party Websites and Services. As a convenience, we may reference or provide links to third-party websites and services, such as social media features and other widgets that run on our site, including those of unaffiliated third parties, our affiliates, service providers, and third parties with which we do business. When you access these third-party services, you leave our Services, and we are not responsible for, and do not control, the content, security, or privacy practices employed by any third-party websites and services. You access these third-party services at your own risk. This Privacy Policy does not apply to any third-party services; please refer to the privacy notices or policies for such third-party services for information about how they collect, use, and process personal information.

Security. We use commercially reasonable administrative, physical, and technical measures designed to protect your personal information from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, mobile application, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal information transmitted to, through, using, or in connection with the Services. In particular, email, texts, and chats sent to or from the Services may not be secure, and you should carefully decide what information you send to us via such communications channels. Any transmission of personal information is at your own risk.

Retention. We keep the personal information described in this policy for as long as reasonably necessary to fulfill the purposes described or for as otherwise legally permitted or required, such as maintaining the Services, operating our organization, complying with our legal obligations, resolving disputes, and for safety, security, and fraud prevention. This means that we consider our legal and business obligations, potential risks of harm, and nature of the information when deciding how long to retain personal data. At the end of the retention period, personal data will be deleted, destroyed, or deidentified.

International Transfers. Your personal information may be stored and processed in the United States, and in any other country where Alcami or its affiliates, subsidiaries, or service providers operate. By your use of the Services, you acknowledge that we will transfer your data to, and store your personal information in, jurisdictions which may have different data protection rules than in your country, and personal information may become accessible as permitted by law in those territories, including to law enforcement and/or national security authorities in those territories.

Modifications and Updates to this Privacy Policy

This Privacy Policy replaces all previous disclosures we may have provided to you about our information practices with respect to the Services. We reserve the right, at any time, to modify, alter, and/or update this Privacy Policy, and any such modifications, alterations, or updates will be effective upon our posting of the revised Privacy Policy. Your continued use of the Services following our posting of any revised Privacy Policy will constitute your acknowledgement of the amended Privacy Policy.

How to Contact Us

If you have an inquiry or complaint regarding this Privacy Policy and/or how we process personal information or would like to exercise any of the legal rights set forth above, please contact us at: privacy@alcami.com.